First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-27065

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while processing a frame with malformed shared-key descriptor.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6800; FastConnect 6900; FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ5424; IPQ9008; IPQ9048; IPQ9554; IPQ9570; IPQ9574; QAM8255P; QAM8650P; QAM8775P; QAMSRV1H

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.htmlVendor Advisory

Timeline

Published: Aug 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-270667.5Transient DOS while processing an ANQP message.CVE-2025-270677.8Memory corruption while processing DDI call with invalid buffer.CVE-2025-270687.8Memory corruption while processing an IOCTL command with an arbitrary address.CVE-2025-270697.8Memory corruption while processing DDI command calls.CVE-2025-27079.1A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/upload CVE-2025-270707.8Memory corruption while performing encryption and decryption commands.CVE-2025-270719.8Memory corruption while processing specific files in Powerline Communication Firmware.CVE-2025-270725.5Information disclosure while processing a packet at EAVB BE side with invalid header length.CVE-2025-270737.5Transient DOS while creating NDP instance.CVE-2025-270747.8Memory corruption while processing a GP command response.CVE-2025-270757.8Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.CVE-2025-270767.0Memory corruption while processing simultaneous requests via escape path.

CVE-2025-27065: High severity, CVSS 7.5 | Vulnix